Markets regulator Sebi on Friday came out with fresh guidelines for managing directors or CEOs of stock exchanges and other market infrastructure institutions to boost cyber security and cyber resilience.

The new framework will come into force with immediate effect, the Securities and Exchange Board of India (Sebi) said.

Market infrastructure institutions (MIIs) — stock exchanges, clearing corporations and depositories — are required to conduct a cyber audit at least twice a financial year.

All MIIs have also been directed by Sebi to submit a declaration of compliance from their MD or CEO certifying that comprehensive processes, including suitable incentive or disincentive structures, have been put in place for identification as well as closure of vulnerabilities in the organisation’s IT systems.

Also, they need to certify that adequate resources have been hired for staffing their Security Operations Center (SOC) and there is compliance by the MII with all Sebi circulars and advisories related to cyber security.

Further, MIIs, whose systems have been identified as ‘critical information infrastructure’ by National Critical Information Infrastructure Protection Centre (NCIIPC), have been mandated to send regular updates of the vulnerabilities found in their respective “protected systems” to NCIIPC.

MIIs have been directed to communicate the status of the implementation of the new guidelines to Sebi within 30 days.

Goenka at SAT

Punit Goenka, former chief of Zee Entertainment Enterprises Ltd, on Friday moved the Securities Appellate Tribunal (SAT) against a Sebi order barring him from holding key positions in four Zee group firms and in the merged entity of Zee and Sony Pictures Networks India.